Tag: npm propagation

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious Artifacts Found in Official KICS Docker Repository and Code Extensions

Docker and Socket uncovered a supply chain compromise affecting Checkmarx KICS distribution channels. Attackers poisoned official Docker Hub images (tags v2.1.20, v2.1.21, alpine) and VS Code extensions (versions 1.17.0, 1.19.0), introducing unauthorized data exfiltration capabilities. The trojaniz…
credential theft
github actions
ci/cd compromise
supply chain compromise
2026-04-22
canister worm
checkmarx kics
docker hub poisoning
mcpaddon.js
npm propagation
vs code extension
Published: April 22, 2026
Downloadable IOCs: 13
Click here to see more Attack Reports